We had an interesting one with Postfix, we were recieving mail fine from all other domains. Then one domain (in this case domain.co.uk) started not to get through, no changes had been made at our end.<\/p>\n\n\n\n
What was happening was that their domain.co.uk nameservers were not reporting TXT records properly, rather than reporting nothing or an SPF record we were getting a “SERVFAIL”, the postfix spf script we used then started to block all mail with a temporary error 450.<\/p>\n\n\n\n
Obviously they needed to fix their domain, but to workaround I did the below:<\/p>\n\n\n\n
Error<\/strong><\/p>\n\n\n\n Sep 27 09:02:20 oakmail postfix\/policy-spf[6114]: : Policy action=DEFER_IF_PERMIT SPF-Result=domain.co.uk: ‘SERVFAIL’ error on DNS ‘SPF’ lookup of ‘domain.co.uk’<\/p>\n\n\n\n Sep 27 09:02:20 oakmail postfix\/smtpd[6102]: NOQUEUE: reject: RCPT from mail.domain.co.uk[212.212.212.212]: 450 4.7.1 <\/a>email@theaddress.co.uk<\/a>: Recipient address rejected: SPF-Result=domain.co.uk: ‘SERVFAIL’ error on DNS ‘SPF’ lookup of ‘domain.co.uk’; from=sender@domain.co.uk<\/a> to=email@theaddress.co.uk<\/a> proto=ESMTP helo=<mail.domain.co.uk><\/p>\n\n\n\n Workaround<\/strong><\/p>\n\n\n\n Edited the \/usr\/share\/perl5\/Mail\/SPF\/Server.pm file on the server, and then found this line:<\/p>\n\n\n\n $packet->header->rcode =~ \/^(NOERROR|NXDOMAIN)$\/<\/strong><\/p>\n\n\n\n And changed it to:<\/p>\n\n\n\n $packet->header->rcode =~ \/^(NOERROR|NXDOMAIN|SERVFAIL)$\/<\/strong><\/p>\n\n\n\n Once done restart the postfix service, then when the sender tried again the messages came through fine. Basically it changed the SERVFAIL from a temporary error to a just ignore and pass the mail anyway type issue.<\/p>\n","protected":false},"excerpt":{"rendered":" We had an interesting one with Postfix, we were recieving mail fine from all other domains. Then one domain (in this case domain.co.uk) started not to get through, no changes had been made at our end. What was happening was that their domain.co.uk nameservers were not reporting TXT records properly, rather than reporting nothing or … Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-711","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=711"}],"version-history":[{"count":1,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/711\/revisions"}],"predecessor-version":[{"id":1519,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/711\/revisions\/1519"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}